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(54) Cellular telephone as an authenticated transaction controller 



(57) The invention includes arrangements for pro- 
viding credit to customers via cellular telephones. In one 
embodiment, a customer seeking credit for the pur- 
chase of goods and services from a merchant (at 30) 
activates his or her cellular telephone (10), authenti- 
cates the cellular telephone with his cellular service pro- 
vider's base station (20), and proceeds to establish a 



connection (to 40) to obtain credit. Credit is obtained by 
sending a unique sequence to the cellular service pro- 
vider that is different from the normal sequence of num- 
bers that correspond to a telephone number of the called 
party. That sequence may include a merchant ID code 
and the amount of credit desired. 
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Description 

Background Of the Invention 

This invention relates to wireless telephones and 
processes for use of such a telephone to secure action 
on behalf of the telephone's holder. 

Today, wireless telephones are used exclusively for 
telecommunication, while other devices are used to se- 
cure action on behaif of a user. For example, Infra-Red 
remote control devices are used to control TVs and 
VCRs; house keys are used to secure entry to a premis- 
es, credit cards are used to obtain consumer credit, etc. 
All of these activities can be classified as 'control trans- 
actions 0 , because control is exercised by the user to ob- 
tain some desired result or benefit. Some of those trans- 
actions are free, such as securing entry to one's own 
home or controlling the reception of free channels of a 
TV. Others are not free, such as securing entry to a 
theater, selecting a "pay per view" TV channel, obtaining 
consumer credit, etc. 

It is an object of this invention to allow users to em- 
ploy their wireless telephones to effect such control 
transactions; and in connection with control transactions 
that are not free, it is an object of this invention to allow 
the cost of such control transactions to be borne by the 
credit account that the wireless telephone holder has 
with the wireless service provider or another party. 

Summary of the Invention 

In accordance with the principles of this invention, 
wireless telephones are used to secure action on behalf 
of a user and form, thereby, transaction controllers. The 
procedure is grounded in the authentication protocol 
that wireless telephones engage in when activated. 
Once the wireless telephone is authenticated, a control 
command is issued by the telephone (or effectively by 
the telephone) and, if necessary, a credit sum is author- 
ized to be debited against the credit account that the 
wireless telephone holder has with the wireless service 
provider. 

In applications where consumer credit is sought to 
be received, for example, a customer seeking credit for 
the purchase of goods and services from a merchant 
activates his or her wireless telephone, authenticates 
the wireless telephone with his wireless service provid- 
er's through the local base station, and proceeds to es- 
tablish a "conversation 0 to obtain credit. Credit is ob- 
tained by sending unique sequence to the wireless serv- 
ice provider that may be different from the normal se- 
quence of numbers that correspond to a telephone 
number of the called party. That sequence may include 
a merchant ID code (which identifies the merchant) and, 
of course, the amount of credit desired. It may also in- 
clude other information, such as the items purchased or 
service received, etc. 

In another embodiment, radio reception equipment 



of the merchant intercepts the information sent to the 
base station, appends information about the merchant 
and the amount of credit desired, and forwards that in- 
formation to the credit-providing organization; i.e. the or- 

5 ganization that holds the account of the wireless tele- 
phone's holder. The communication with the credit-pro- 
viding organization may take place through wireless 
transmission or through landline transmission. 

When the request for credit is deemed proper, a 

io message is sent to the merchant, authorizing the exten- 
sion of credit, and the transaction terminates success- 
fully. 

In an application where the control transaction does 
not need to access the credit line of the wireless tele- 

ts phone holder, and where only authentication is impor- 
tant - such as when using the wireless telephone to 
open the garage door to one's home, the random signal 
of a wireless base station is combined to send a signal 
that can be authenticated. When it is so authenticated, 

20 the control transaction is executed. 

Brief Description of the Drawing 

FIG. 1 depicts an arrangement for carrying out the 
25 objectives set forth above; 

FIGS. 2 - 4 present flow diagrams of illustrative pro- 
tocols that incorporate the principles disclosed 
herein; 

30 

FIGS. 5-6 show flow diagrams for a secured control 
application; and 

FIG. 7 illustrates a home controller base station 
35 arrangement. 

Detailed Description 

For illustrative and expository purposes, the disclo- 
se sure herein begins by describing the process of extend- 
ing and obtaining consumer credit, where authentication 
and exchange of value are paramount. Then, it de- 
scribes the process of gaining access to a home, where 
authentication is essential. Finally, it describes the proc- 
4$ ess of controlling appliances, such as a TV, where only 
command and control capabilities are the primary con- 
cerns. The description below deals with cellular tele- 
phones and the protocols that are adapted for cellular 
telephones. It should be understood, however, that the 
so instant invention is broader than the use of cellular tel- 
ephones, as compared to other wireless telephones. 

1. Extending Credit 

55 Today, the process of extending consumer credit is 
a fairly mundane operation. An organization such as a 
bank offers credit to a customer, provides the customer 
with a credit card, and the customer uses the credit card 
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to purchase goods and services. When goods and serv- 
ices are purchased, a charge is made against the cus- 
tomer's credit, at the end of a billing cycle the organiza- 
tion sends out a statement to the customer and, in due 
course, the customer compensates the organization for s 
the credit that it extended. 

Of course, a person wishing to get a credit card 
needs to find an organization that would extend this 
credit. But, while finding an organization that would ex- 
tend credit is not a particularly difficult hurdle for many 
people, it bears pointing out that most credit customers 
already have a creditor/debtor relationship with two or 
more communication carriers (local exchange service, 
long distance carrier, cellular carrier). The question aris- 
es, then, whether this prevalent relationship can be used 
to extend general consumer credit. Now that an increas- 
ing number people are carrying cellular telephones, it 
would certainly be advantageous to make use of this re- 
lationship and do away with credit cards altogether. 

The arrangements and processes described below 
provide this capability. 

FIG. 1 depicts a cellular telephone 1 0 that is adapt- 
ed for wireless communication with a base station 20. 
Base.station 20 communicates with a credit center 40, 
and credit center 40 communicates with merchant's 
equipment 30. Base station 50 also communicates with 
credit center 40. 

Credit center 40 and the cellular service providers 
that operate base stations 20 and 50 can be one and 
the same organization, but they need not be. Typically, 
credit center 40 is the billing arm of the organization that 
provides the cellular service to the user. For example, 
base station 20 can belong to cellular service provider 

A, base station 50 can belong to cellular service provider 

B, and the bona fide holder of cellular telephone 10 has 
a contractual relationship with provider B. Under these 
assumptions, center 40 is the billing organization of pro- 
vider B. 

Also, channel 21 which connects equipment 30 to 
credit center 40 can be wired or wireless. Any conven- 
ient protocol can be employed for communicating be- 
tween equipment 30 and credit center 40, provided that 
secure authentication can take place. 

The basic transaction in the context of obtaining 
consumer credit is for cellular telephone 1 0 to charge a 
chosen amount to its account with credit center 40 and 
to inform a merchant that he/she will get the benefit of 
this charging against the telephone holder's account. It 
is presumed that cellular telephone 10 is in the hands 
of a bona fide customer The protocol that one might en- 
gage when there is a doubt regarding the bona fide of 
the person possessing the cellular telephone is not de- 
scribed here, for sake of brevity. It may include, for ex- 
ample, use of a customer personal identification code, 
voice authentication, etc. It is recognized, however, that 
one of the challenges is to insure that both the customer 
and the merchant to receive the benefit of the extended 
credit. Another challenge is to provide this interaction in 



a secure manner so that neither the customer nor the 
merchant can be disadvantaged. Still another challenge 
is to provide this interaction so that a third party can not 
be disadvantaged by, or take advantage of, this commu- 
nication. 

These objectives are realized with the protocol pre- 
sented in FIG. 2, which generally follows the teachings 
found in U.S. Patent 5,204,902, issued to Reeds et al 
on April 20, 1993. This patent is hereby incorporated by 
reference. 

To briefly describe the teachings of the Reeds et al 
patent, each cellular telephone possesses a "shared se- 
cret data" (SSD) digital data string that is derived from 
a hashed combination of a secret key (A-key), the cel- 
lular telephone's equipment number (ESN), the cellular 
telephone's assigned number (MINI), and a random 
string that is selected by the organization with which the 
cellular telephone user has a business relationship. Typ- 
ically, that organization is a cellular service provider with 
whom the customer "signed up"; i.e., maintains a con- 
tractual relationship to pay for accrued charges. 

Cellular service providers are usually limited to a 
particular geographic area. That area is the •home" cel- 
lular geographic service area (home CGSA) of that cus- 
tomer. For purposes of this description, the home CGSA 
of cellular telephone 10 is base station 50. Base station 
20, in whose cell cellular telephone 10 is present, is the 
Visited 0 host CGSA. The SSD string is divided into two 
strings, the SSDA and SSDB. The SSDA string is used 
for authentication, and the SSDB string is used for com- 
munication encryption. 

In operation, each cell in a cellular communication 
network is serviced by a base station (e.g., base stations 
20 and 50). The base station broadcasts a random se- 
quence (RAND) at some selected repetition rate, and 
changes that RAND relatively often for enhanced secu- 
rity (e.g. more often than the duration of most cellular 
calls). When a cellular telephone that is located in a cell 
is turned on, it receives the RAND sequence and re- 
sponds by introducing itself to the cell (telephone 10 re- 
ceives the RAND transmitted by base station 20). This 
is the registration process, and it is depicted by lines 
(processes) 11, 12 and 13 in FIG. 2. 

Describing processes 11,12 and 13 more specifi- 
cally, the cellular telephone concatenates its ESN and 
MINI strings with the SSDA and the RAND strings, and 
hashes the resulting string to obtain the AUTHR string. 
It then transmits the AUTHR string together with the 
RAND, ESN and MINI strings to the base station for 
confirmation. As an aside, the RAND signal is sent be- 
cause the base station may have changed its RAND be- 
tween the time RAND was received by cellular tele- 
phone 10 and the time AUTHR is received by the base 
station; but that is optional because the base station can 
easily remember its last RAND string. 

The base station detects the ESN and MINI strings 
and determines therefrom the asserted identity of the 
cellular telephone and the identity of the home CGSA. 
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station 20 must be linked to (in the sense of being cor- 
related with) the communication between merchant 30 
and center 40. The link can be established by the mer- 
chant and the customer agreeing to use a selected 
transaction password (TP string). This string can be ran- 
dom and transitory; e.g., used only once. The customer 
can enter the TP string instead of the merchant's ID 
code and send that to base station 20, and the merchant 
can use the same TP in the merchant's communication 
with credit center 40. The TP string can be communicat- 
ed from the merchant to the customer orally, with the 
customer inserting that code into the cellular telephone. 
This eliminates the danger of a nearby cellular tele- 
phone inadvertently participating in the communication 
and having its credit account debited. Since the TP 
string is used only once, there is no value to it for an 
interloper, and an error in this step merely causes the 
transaction to fail in a very clear manner. When that hap- 
pens, the customer and the merchant can re-enter the 
TP string (or a different TP string) and try again. 

In accordance with this modified protocol, the tele- 
phone's communication is as before. The difference lies 
in the fact that the merchant's equipment contacts the 
credit center, identifies itself, provides the TP string and, 
when appropriate, receives the approval, or authoriza- 
tion, from the center. 

To help credit center 40 link the TP string provided 
by the merchant to the transmission by telephone 10, it 
would be advantageous for merchant's equipment 30 to 
include the ESN and MINI of telephone 10. This proto- 
col is presented in FIG. 3. 

Of course, equipment 30 must receive the ESN and 
MINI information from telephone 10, and that can be 
achieved with a receiver 31 associated with equipment 
30. Such a receiver can be a low-sensitivity receiver, 
because the customer purchasing the goods and serv- 
ices is expected to be in close proximity to the receiver 
and because the merchant indeed desires to not receive 
transmission from neighboring cellular telephones. 

Reception ofjust the right cellular telephone can be 
assured by more than just employing a weak receiver. 
For example, the receiver of equipment 30 can be set 
to discard all receptions from cellular telephones that do 
not transmit the TP string. Or, equipment 30 can include 
a metallic shroud 32 around an antenna 31 into which 
the antenna of telephone 10 is inserted, causing only 
that signal to be received by antenna 31 . 

With receiver 31 introduced into equipment 30. 
communication between telephone 10 and base station 
20 need not necessarily take place or, in any event, need 
not necessarily take place directly . That is, equipment 
30 can capture the transmission of telephone 10, add 
whatever data it desires, and forward the combined in- 
formation to credit center 40 via base station 20 (using 
path 22 in FIG. 1). Alternatively, equipment 30 can by- 
pass base station 20 and send its data directly to credit 
center 40 where preprocessor 42 receives the data and 
emulates the registration process of base station 20. As 



depicted in FIG. 4, merchant's equipment 30 can obtain 
the RAND string from preprocessor 42 and send it to 
wireless telephone 10. Concurrently, the merchant can 
give the TP string to the user of wireless telephone 10. 
5 Wireless telephone 10 creates a string that comprises 
the transaction password string (TP), the ESN and MINI 
strings, optionally the MIN2 string, and AUTHR valida- 
tion string (i.e., the TP string is embedded in the AUTHR 
string). Equipment 30, in turn, communicates that infor- 
mation to preprocessor 42, adding the TP string, the 
sum, its ID code and, perhaps, the RAND string. Pre- 
processor 42 confirms the bona ffcfeof the user request- 
ing credit by analyzing the AUTHR string vis-a-vis the 
other data sent by equipment 30 and determines wheth- 
er to grant credit. Its decision is then communicated to 
equipment 30 and, optionally, to wireless telephone 10. 
A written confirmation of the amount charged to the cus- 
tomer's account can be had from a printout provided to 
the customer by the merchant and, if desired, the print- 
out can be signed by the customer for a backup valida- 
tion of the charge. Such a printer is shown as device 33 
in FIG. 1. 

In terms of the hardware needed for the system of 
FIG. 1, the equipment is completely conventional. Cel- 
lular telephone 10 is a conventional cellular telephone, 
and so are base stations 20 and 50. The merchant's 
equipment is simply a receiver that is akin to, but much 
simpler than, the receiver in base station 20. All it needs 
to do is discriminate in its reception of signals in favor 
of the right incoming signal. In this case, it is expected 
that the cellular telephone of the customer wishing to 
make a purchase will be at least twice as close to the 
merchant's receiver than the next nearest active cellular 
telephone. Shroud 32 would make such discrimination 
error more effective. Therefore, a discrimination based 
on incoming power would be simple and effective. It may 
be remembered, however, that such discrimination can 
be also had by simply confirming that the TP string is 
contained in the communication from cellular telephone 
10. That would require the cellular telephone to output 
the TP string "in the clear" as well as embedded in AU- 
THR. 

In addition to the receiver, merchant's equipment 30 
requires a means for appending information to the re- 
ceived data and sending that data to credit center 40. 
Such equipment can be realized easily with a conven- 
tional PC, or with even less versatile and less expensive 
special hardware arrangements. The printer can be any 
of the printers commonly used today in connection with 
conventional credit cards. 

As for credit center 40, it is mostly a communication 
and database hub that is not unlike present day cellular 
providers' business offices. 

2. Coming Home 

After a shopping trip such as intimated above, a 
holder of cellular telephone may wish to gain access to 
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his or her home by having the garage door open under 
control ol the same cellular telephone. For this purpose, 
credit center 40 need not be involved because credit is 
not being extended (except, of course, it a charge is in- 
curred for the contributions made to this control trans- 5 
action by the base station). While the outlined task is 
one of mere control over the garage door opener, as de- 
scribed below it can still involve telecommunication, al- 
though that is not a requirement. 

In a telecommunication embodiment, a garage door io 
opener is merely a cellular telephone receiver followed 
by an additional deciphering means. In operation, the 
garage door opener is registered with the cellular base 
station, and the base station is capable of installing 
therein the SSDA and the SSDB strings. In short, the *5 
base station can communicate with the garage door 
opener in a secure manner, almost as with other cellular 
telephones; the difference being that it is only one way 
communication - from the base station to the garage 
door receiver. 20 

When the cellular telephone 10 wishes to have the 
garage door opened, it requests the base station to 
make a call to the garage door receiver and forward to 
that receiver a command data string. The data string 
comprises a random number (RANDX) that is "punched 25 
in" by the holder of the cellular telephone (that is the TP. 
transaction password, for this transaction) and a hash- 
ing of that random number with key (B-Key) which is 
stored in cellular telephone 10. 

As indicated above, the receiver contains a deci- 30 
phering means that recovers the string that had been 
hashed with the B-Key. When the deciphered random 
number corresponds to the random number received "in 
the clear" , the garage door is opened. This protocol is 
depicted in FIG. 5, where lines 11, 12 and 13 represent 35 
the registration process as described in connection with 
FIG. 2. 

It may be observed that the cellular telephone fol- 
lows a slightly different protocol in FIG. 5 than the pro- 
tocol of normal telephone connections. Specifically, in- 40 
stead of sending merely the called party's telephone 
number (MIN3) and waiting for an indication from the 
base station that the called party answered, the RANDX 
and B-Key(RANDX) strings are immediately appended. 
This is easily accomplished in the cellular telephone by 45 
selecting sequence that the cellular telephone can read- 
ily recognize (and which does not correspond to an oth- 
erwise valid string), e.g. M *8 B , followed by the user-sup- 
plied RANDX string. 

In the alternative, cellular telephone 10 can send so 
the MIN3 as expected, wait for a clear-to-send signal, 
and then forward the remainder of the sequence. 

In an embodiment that does not involve telecommu- 
nication, the cellular base station is still involved in the 
sense that the cellular telephone automatically interacts 55 
with the base station and registers itself as soon as the 
cellular telephone is turned on. Stated in other words, 
like it or not, when the cellular telephone is turned on, it 



registers itself with the base station. This activity, nor- 
mally, does not produce a charge against the credit ac- 
count of the cellular telephone's holder Beyond this reg- 
istration point, in an embodiment that does not involve 
telecommunication the objective is to open the garage 
door without assistance from the base station. 

This can be accomplished in a number of ways, but 
all require that the signal sent to the base station follow- 
ing the "go ahead" signal of line 1 3 (in FIG. 5) should be 
unintelligible to the base station. Conversely, the garage 
door receiver should be tuned to that transmission from 
the cellular telephone and should understand the trans- 
mission. This can be achieved, for example, by the ga- 
rage door receiver eavesdropping on the base station's 
"go ahead" transmission that instructs the cellular tele- 
phone to operate at a particular frequency. The receiver 
can then tune itself to that same frequency and capture 
the cellular telephone's transmission. As shown in FIG. 
6, when cellular telephone 10 then sends the signal of 
line 25 in FIG. 5, the receiver intercepts it, deciphers it, 
and the garage door responds accordingly. In such an 
embodiment, MIN3 would be a string that is not recog- 
nized by the base station, or AUTHR would be deleted, 
or merely altered, to cause a rejection by the base sta- 
tion. Alternatively, when the "*8" sequence is inserted 
into cellular telephone 10, it can tune itself to the fixed 
hailing frequency that is used for registration. For such 
a realization, the garage door opener can be perma- 
nently tuned to that hailing frequency. 

It may be mentioned in passing the above-present- 
ed example of opening a garage door is just that: an 
example. Other control applications, such as unlocking 
a car's door or one's house, activating an alarm, etc. are 
all within the scope of this invention. 

3. Extended Control 

Having gained the desired access to the home, the 
holder of a cellular telephone 1 0 may wish to control var- 
ious appliances. In such an application, security is not 
the concern it was in the two applications disclosed 
above. Also, from a public policy standpoint it may be 
desirable to not involve the base station is such control 
applications. The latter can be effected by simply chang- 
ing the operating frequency of the cellular telephone to 
a band that is not covered by the base stations. In op- 
eration, each home can have its own home controller 
base station that operates at a selected frequency 
Through a switch or a "punched in" code, the cellular 
telephone can be placed in a "home controller" mode, 
and in that mode the cellular telephone interacts solely 
with the home controller base. The home controller base 
can then perform whatever controls are assigned to it, 
using conventional techniques. The authentication 
process can still take place, as before, but under control 
of the home controller base station. That is, the home 
controller base can include the capability to authenticate 
the cellular telephone qua home controller but it doesnl 
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have to, or it can selectively do so, based on the desired 
interaction. For example, the cellular telephone qua 
home controller can be used to change TV channels, 
and for that, perhaps, some security measures may be 
desired; but it can also be used to interact with the sup- 
plier of the television signals, for which security may not 
be sought. Purchases can be made through such inter- 
actions, and the owner of a home controller base may 
not mind having a visitor use the home controller base 
as a conduit. The arrangement disclosed above is illus- 
trated in FIG. 7, which includes a home base station 60. 
various home controllers 61 that control appliances, for 
example, a television "set top box" 62, a television 63 
and means 64 for interacting with a supplier of goods 
and/or services that are advertised on the television. 
Such means may be the portion of the set top box that 
sends signals back to the supplier of the television sig- 
nals (so depicted), but it doesnl have to be. 

It should be noted that the principles disclosed here- 
in are not limited to cellular telephones. Any wireless 
means can achieve the capabilities that are disclosed 
herein as long as such means has the authentication 
capabilities that are appropriate for the application at 
hand; and as indicated above, for some applications the 
desired authentication capabilities are not significant or 
unneeded at all. 



Claims 

1. A method for securing action on behalf of a user, 
comprising the steps of: 

activating a wireless communication device 
that is adapted for telecommunication; 

based on signals emitted by the communica- 
tion device, authenticating the identity of the com- 
munication device; and 

performing a specified action authorized by 
the wireless communication device. 

2. The method of claim 1 wherein the step of authen- 
ticating employs a protocol that, at least in part, cor- 
responds to at least a part of a registration protocol 
employed by the communication device when that 
communication device is used in telecommunica- 
tion applications. 

3. The method of claim 1 wherein the step of authen- 
ticating employs a protocol that, at least in part, cor- 
responds to a registration protocol employed by the 
communication device when that communication 
device is used in telecommunication applications. 

4. The method of claim 1 wherein the action on behalf 
of the user is the granting of credit to the user. 

5. The method of claim 4 wherein the granting of credit 
is by a party that provides telecommunication serv- 



12 

ices to the communication device. 

6. The method of claim 4 wherein the granting of credit 
is by a party other than the party that provides tel- 

5- ecommunication services to the communication 
device. 

7. The method of claim 1 wherein the action on behalf 
of the user is the transmission of a secure control 

io signal to a specified destination. 

8. The method of claim 1 wherein the action on behalf 
of the user is the transmission of a control signal to 
a destination. 

75 

9. The method of claim 8 where the destination is a 
home controller base station. 

10. The method of claim 8 where the destination is a 
20 home controller base station that interacts with a 

party that provides signals to a television set. 

1 1 . The method of claim 4 wherein said step of granting 
credit includes transmitting to a credit-providing 

25 center a string that includes a transaction password 
substring, a credit amount substring, an ID sub- 
string, and a validation substring. 

12. An arrangement for providing credit to a first party 
30 for the benefit of a second party, where the first party 

has a wireless telephone and a relationship with a 
credit-providing center comprising: 

first means for identifying the wireless tele- 
phone to the credit center using an identification 
35 protocol that comports with the identification proto- 
col used by the wireless telephone for wireless com- 
munication; 

second means for associating with the wire- 
less telephone identified by said first means a credit 
40 sum and an identification of said second party; and 
third means for the credit center communicat- 
ing an approval status to said second party. 

13. The apparatus of claim 12 wherein essential ele- 
45 ments of said first means, second means and third 

means are under control of said credit-providing 
center. 

14. The arrangement of claim 12 wherein said first 
50 means comprises a cellular telephone base station 

and a communication link between the base station 
and the credit center. 

15. The arrangement of claim 12 wherein said first 
55 means comprises transmission apparatus on 

premises of said second party for communicating 
with the credit center. 
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16. The arrangement of claims 15 wherein the trans- 
mission apparatus on the premises of said second 
party communicates with the credit center via a cel- 
lular telephone base station. 

s 

17. The apparatus of claim 12 wherein essential ele- 
ments of said first means, second means, and third 
means are located on the premises of said second 
party. 

10 

18. The arrangement of claim 17 wherein said first 
means further comprises a receiver for communi- 
cating with said wireless telephone. 

19. The arrangement of claim 18 further comprising is 
means for discriminating transmission from said 
wireless telephone from transmissions from other 
wireless telephones. 
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